ZombieLoad: Cross Privilege-Boundary Data Leakage on Intel CPUs

Re:ZombieLoad: Cross Privilege-Boundary Data Leakage on Inte... by fwip on Tuesday May 14, 2019 @03:49PM (#19913210)

I think the argument VM-sellers make is that it's more secure than running a bunch of colocated code on the same machine without VMs, not that it's more secure than distinct physical systems.

[ Parent | on HN ]

Re:ZombieLoad: Cross Privilege-Boundary Data Leakage on Inte... by bluGill on Tuesday May 14, 2019 @05:51PM (#19914208)

That is their claim. Theo is pointing out that the security is an illusion. Either the OS is secure and so you may as well just run everything in the OS without the VM in the way (ignoring issues of different operating system), or the OS is not secure and now you have to hope the VM is secure because otherwise you just exploit your VM to get out of it and then exploit the OS. The second level attack is more difficult, but that is all.

[ Parent | on HN ]